$ rpki-client -vvf rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.mft File: AEE1F2C62335FF3372773DE72545E8B38F0BFC21.mft (raw, json) Hash identifier: EYkkWbFhxFqSAyHXj2xB4dZLTWu1rpIMEUOMjXsu8NE= Subject key identifier: 7D:5C:CA:0B:D9:AE:FD:79:7E:90:43:14:7F:B4:EB:EB:BA:F2:CC:D6 Authority key identifier: AE:E1:F2:C6:23:35:FF:33:72:77:3D:E7:25:45:E8:B3:8F:0B:FC:21 Certificate issuer: /CN=AEE1F2C62335FF3372773DE72545E8B38F0BFC21 Certificate serial: 5B19CE21E4F44621A14C74D067B3EFFDACE88E96 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.cer Subject info access: rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.mft Manifest number: 03D7 Signing time: Tue 07 Apr 2026 23:46:53 +0000 Manifest this update: Tue 07 Apr 2026 23:41:53 +0000 Manifest next update: Thu 09 Apr 2026 01:27:53 +0000 Files and hashes: 1: 323830343a323430343a3a2f33322d313238203d3e20323634313937.roa (hash: 236rbuE6CNlKGrYUH+Q896OupmC6iWBiV75vwlEIa9s=) 2: 3133382e39372e3134382e302f32322d3332203d3e20323634313937.roa (hash: I0S6tO1Zs9EL6oQ6LD9gZbTTVRuJPxeWovDHqnX9Joo=) 3: AEE1F2C62335FF3372773DE72545E8B38F0BFC21.crl (hash: tog7CJgXZzCwviF+N55Gy+/rPTrUVf0Is8bnozmXpI0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.crl rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 01:27:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:19:ce:21:e4:f4:46:21:a1:4c:74:d0:67:b3:ef:fd:ac:e8:8e:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEE1F2C62335FF3372773DE72545E8B38F0BFC21 Validity Not Before: Apr 7 23:41:53 2026 GMT Not After : Apr 9 01:27:53 2026 GMT Subject: CN=7D5CCA0BD9AEFD797E9043147FB4EBEBBAF2CCD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d0:75:4d:6a:b4:f0:76:79:5b:c1:87:23:9c: da:62:50:a6:0c:3d:2a:5c:18:82:fd:8a:24:9a:79: df:2e:3c:49:e7:40:88:d1:c1:f0:bc:8d:42:50:89: 54:10:db:9e:45:d4:06:09:dd:06:10:37:d0:ad:f3: 7a:f6:9a:74:8f:12:60:3f:1e:8a:1c:57:7f:61:79: 0e:ed:40:e0:14:d7:31:45:0f:af:d8:c3:8c:2c:9b: 09:0d:98:03:a6:0e:f3:3e:a3:8a:12:c7:c2:01:47: e5:7c:0f:d4:fb:e1:0d:35:46:62:f3:5b:38:a0:e3: e0:22:7b:a9:d9:8f:77:60:25:6f:43:2b:2a:22:79: 70:65:e3:3b:23:0d:4e:f8:de:d2:c1:d7:21:74:ec: 35:30:08:0e:fa:5f:12:8a:b5:b5:4d:5c:30:96:de: 7b:b2:75:78:55:4b:06:c0:36:cd:bc:ed:36:59:b3: 2d:85:9e:c0:ec:fc:ce:2e:ce:aa:51:e4:1d:89:86: 4e:f8:82:12:71:6a:00:95:f3:7a:d1:3f:85:41:eb: 30:3c:a7:7b:ad:5e:f7:a8:2c:e6:0b:a8:a1:ed:0f: 1e:b4:83:73:c6:63:b6:83:25:7c:84:36:b0:98:eb: 04:15:1b:ab:80:f9:75:07:04:a1:85:95:ab:50:d2: ff:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:5C:CA:0B:D9:AE:FD:79:7E:90:43:14:7F:B4:EB:EB:BA:F2:CC:D6 X509v3 Authority Key Identifier: keyid:AE:E1:F2:C6:23:35:FF:33:72:77:3D:E7:25:45:E8:B3:8F:0B:FC:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:cb:55:32:3f:b3:ca:86:33:dd:f0:7e:88:04:94:44:8a:da: 38:85:c5:34:19:92:6e:66:e1:14:9b:2b:1a:0c:4a:d1:8b:77: b7:8f:b7:44:41:18:de:44:7b:d7:b1:ca:da:e7:8a:08:ff:8f: 14:22:4d:36:b1:31:e9:0c:ff:79:51:f2:1d:78:8b:b3:2c:18: a0:2d:08:b2:d8:87:c1:e7:7d:8c:21:ae:ac:ae:c7:f0:b5:8b: 43:f0:0e:6f:09:60:f1:72:eb:4a:48:1d:58:b0:64:e5:d8:2f: ca:92:d0:af:e0:0a:65:bf:ce:5d:a0:aa:55:9d:66:f4:d9:d9: d9:05:55:00:1a:47:b5:c7:16:71:86:3c:ec:37:3a:24:18:fa: 66:5f:45:db:20:28:85:18:bc:3a:7b:71:9f:c7:c1:d2:fe:dc: e8:20:2a:65:6d:4c:58:c7:a1:17:c5:71:8c:12:8a:37:5a:f4: 56:e9:60:4d:c4:a4:49:b4:e0:85:03:95:87:62:0e:e6:88:e2: f7:fd:71:48:72:57:f7:dc:00:c0:9e:4d:b8:e6:d2:1f:53:f8: 48:12:a3:47:fc:a1:02:41:20:bd:73:40:b6:b9:e3:97:8a:e9: 20:8a:90:a0:ba:e5:66:7b:d4:52:50:e9:28:a8:42:48:f9:37: 11:eb:cd:f8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWxnOIeT0RiGhTHTQZ7Pv/azojpYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVFMUYyQzYyMzM1RkYzMzcyNzczREU3MjU0NUU4QjM4 RjBCRkMyMTAeFw0yNjA0MDcyMzQxNTNaFw0yNjA0MDkwMTI3NTNaMDMxMTAvBgNV BAMTKDdENUNDQTBCRDlBRUZENzk3RTkwNDMxNDdGQjRFQkVCQkFGMkNDRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu0HVNarTwdnlbwYcjnNpiUKYM PSpcGIL9iiSaed8uPEnnQIjRwfC8jUJQiVQQ255F1AYJ3QYQN9Ct83r2mnSPEmA/ HoocV39heQ7tQOAU1zFFD6/Yw4wsmwkNmAOmDvM+o4oSx8IBR+V8D9T74Q01RmLz Wzig4+Aie6nZj3dgJW9DKyoieXBl4zsjDU743tLB1yF07DUwCA76XxKKtbVNXDCW 3nuydXhVSwbANs287TZZsy2FnsDs/M4uzqpR5B2Jhk74ghJxagCV83rRP4VB6zA8 p3utXveoLOYLqKHtDx60g3PGY7aDJXyENrCY6wQVG6uA+XUHBKGFlatQ0v8nAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUfVzKC9mu/Xl+kEMUf7Tr67ryzNYwHwYDVR0j BBgwFoAUruHyxiM1/zNydz3nJUXos48L/CEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGI1TWFqVTlmN3BMeXJTaWRWZFpXYnMzRTdEeW5wTlRmM29RZWZGcjlT NVQvMS9BRUUxRjJDNjIzMzVGRjMzNzI3NzNERTcyNTQ1RThCMzhGMEJGQzIxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FFRTFGMkM2MjMzNUZGMzM3 Mjc3M0RFNzI1NDVFOEIzOEYwQkZDMjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGI1TWFqVTlmN3BMeXJTaWRWZFpXYnMzRTdEeW5wTlRmM29RZWZGcjlTNVQvMS9B RUUxRjJDNjIzMzVGRjMzNzI3NzNERTcyNTQ1RThCMzhGMEJGQzIxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADctVMj+zyoYz3fB+iASURIraOIXFNBmSbmbhFJsrGgxK0Yt3t4+3REEY3kR7 17HK2ueKCP+PFCJNNrEx6Qz/eVHyHXiLsywYoC0IstiHwed9jCGurK7H8LWLQ/AO bwlg8XLrSkgdWLBk5dgvypLQr+AKZb/OXaCqVZ1m9NnZ2QVVABpHtccWcYY87Dc6 JBj6Zl9F2yAohRi8Ontxn8fB0v7c6CAqZW1MWMehF8VxjBKKN1r0VulgTcSkSbTg hQOVh2IO5oji9/1xSHJX99wAwJ5NuObSH1P4SBKjR/yhAkEgvXNAtrnjl4rpIIqQ oLrlZnvUUlDpKKhCSPk3EevN+A== -----END CERTIFICATE-----Generated at Wed Apr 8 12:19:26 2026 by rpki-client